CVE-2017-8835: Improper Neutralization of Special Elements used in an SQL Command

SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. An attack vector is the bauth cookie to cgi-bin/MANGA/admin.cgi. One impact is enumeration of user accounts by observing whether a sessi...

CVE-2017-7945

The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account nam...

CVE-2017-7945: Generation of Error Message Containing Sensitive Information

The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account nam...

PT-2017-18018

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 6.1.16 and earlier Palo Alto Networks PAN-OS versions 7.0.14 and earlier Palo Alto Networks PAN-OS versions 7.1.8 and earlier Palo Alto Networks PAN-OS versions 8.0.1 and earlier Description The issue allows...

NetIQ Sentinel Server Information Disclosure Vulnerability

NetIQ Sentinel Server is a security information and event management tool. NetIQ Sentinel Server 8.0 prior to version 8.0.1 has a security vulnerability that can lead to information disclosure account enumeration...

CVE-2017-2382: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. macOS Server before 5.3 is affected. The issue involves the "Wiki Server" component. It allows remote attackers to enumerate user accounts via unspecified vectors...

CVE-2017-5184

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information account enumeration...

Design/Logic Flaw

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information account enumeration...

CVE-2017-5184

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information account enumeration...

CVE-2017-5184

NetIQ Sentinel Server 8.0 prior to 8.0.1 is affected by CVE-2017-5184, which may allow information disclosure (account enumeration) over the network. The OpenVAS entry corroborates leakage of information and notes a remediation path of upgrading to Sentinel 8.0.1. As per the NVD entry, the base i...

CVE-2017-5184: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information account enumeration...

PT-2017-16371

Name of the Vulnerable Software and Affected Versions NetIQ Sentinel Server version 8.0 Description A vulnerability was discovered that may allow leakage of information, specifically account enumeration. Recommendations For version 8.0, update to version 8.0.1 to resolve the issue...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537: Exposure of Sensitive Information to an Unauthorized Actor

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

PT-2017-16566

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 2.10.1 Description The issue concerns the password reset form, which provides different error messages based on whether an email address is associated with an account. This allows remote attackers to enumerate user...

CVE-2016-4947: Exposure of Sensitive Information to an Unauthorized Actor

Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete...

PT-2017-8627

Name of the Vulnerable Software and Affected Versions Cloudera HUE versions 3.9.0 and earlier Description The issue allows remote attackers to enumerate user accounts via a request to "desktop/api/users/autocomplete". This enables attackers to gather information about existing user accounts...

Apple OS X Kerberos 5 PAM Module User Account Enumeration Vulnerability

Apple OS X is a proprietary operating system developed by Apple for Mac computers.Kerberos 5 also known as krb5 PAM is one of the network authentication protocol components. A user account enumeration vulnerability exists in the Kerberos 5 PAM module in Apple OS X versions prior to 10.12, which c...